stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Duplicate of CySA + Ch 1 & 2 Version A Flashcards | StudBud
Explore
/
Duplicate of CySA + Ch 1 & 2 Version A
Duplicate of CySA + Ch 1 & 2 Version A
20 terms
·
StudBud Administration
·
134 plays
Imported from external platform
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
What is the process called that uses a built in document inspector to verify a file does not contain hidden content?
Metadata scrubbing
Data remanence insurance
Data purging
File cleansing
2
What specialized firewall can protect against SQL injection, XSS, CSRF, and similar attacks
WAF
NGFW
Packet Filter
Stateful Inspection
3
What flag does nmap use to enable operating system identification?
-osscan
-id
-os
-o
4
What technology can be used to deploy consistent security settings to all Windows systems simultaneously?
DNS
HIPS
IPS
GPO
5
In a Cybersecurity exercise. What team has the role of attempting to break into systems?
Black Team
Blue Team
Red Team
White Team
6
Which Cisco log level is the most critical?
10
1
7
0
7
What command-line tool can be used to determine the path that traffic takes to a remote system?
routeview
nslookup
traceroute
Whois
8
Which technique might be used to automatically detect and block malicious software that does not match known signatures
Hashing
Decompiling
Sandboxing
MAC
9
During passive intelligence gathering, what information would you not be able to find using netstat on a Windows system?
A list of executables by connection
Active IPX connections
Active TCP connections
Route table information
10
What TCP port must be allowed through the firewall for external traffic using HTTPS to reach the webserver?
80
143
443
25
11
What organization manages the global IP address space?
IANA
WorldNIC
NASA
ARIN
12
Which is not one of the 3 main objectives security professionals must achieve to protect their organization from threats
Availability
Integrity
Nonrepudiation
Confidentiality
13
What method is used to replicate DNS information for DNS servers but is also a tempting exploit target for attackers?
Zone Transfer
DNS Registration
AXR
DNSSEC
14
Which type of Windows log is most likely to contain information about a file being deleted?
Security logs
System logs
httpd logs
Configuration logs
15
Which step occurs first during the attack phase of a penetration test?
Escalating privileges
Gaining access
System browsing
Install additional tools
16
Which one of the following ports should not be open on the jump box server used by admins connecting with their laptops?
443
23
3389
22
17
Which of the following options is the most likely used for the host listed in the dhcpd.conf entry?
Apache web server
Active Directory server
Oracle database server
Microsoft SQL server
18
What type of data can frequently be gathered from images taken on smartphones?
Exif
PNGrams
JPIF
Extended Graphics Format
19
During what phase of a penetration test should the testers obtain written authorization to conduct the test?
Attack
Reporting
Discovery
Planning
20
What firewall type provides the greatest degree of contextual information including info about users and application
Stateful Inspection
WAF
Packet Filter
NGFW